Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
File: SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft (raw, json)
Hash identifier: f5N2BVBqwMPNFpNhyAZUtyzzenju/GUFAeJCoMQZx48=
Subject key identifier: A4:30:AF:E4:D6:BC:85:D5:5C:A3:D1:C3:6C:22:D6:B3:9A:A4:8F:58
Authority key identifier: 48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD
Certificate issuer: /CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
Certificate serial: 0194BB292F0A5B80A58AD66EA402BA6D60A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
Manifest number: 136B
Signing time: Fri 31 Jan 2025 07:00:25 +0000
Manifest this update: Fri 31 Jan 2025 07:00:25 +0000
Manifest next update: Sat 01 Feb 2025 07:00:25 +0000
Files and hashes: 1: 5ZSiu_Jf4uuM2tr9eexam4PdUnQ.roa (hash: 4s92BezBLCr6XDiFpPfCSDr/ke7pRUF4VnT2G98F0hQ=)
2: SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl (hash: wmS5OKRLJjHbjDccAz2pjQZE+FDNgMbKVJrOxQSQVnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:2f:0a:5b:80:a5:8a:d6:6e:a4:02:ba:6d:60:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
Validity
Not Before: Jan 31 07:00:25 2025 GMT
Not After : Feb 1 07:00:25 2025 GMT
Subject: CN=a430afe4d6bc85d55ca3d1c36c22d6b39aa48f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:aa:8d:88:55:ee:84:ae:f1:51:67:2f:44:
22:06:86:14:df:18:09:90:df:97:90:4f:61:d7:48:
3e:a9:b1:06:0d:29:54:71:d5:dc:67:a6:84:93:a9:
5d:ec:05:43:4f:f3:21:7c:e2:50:eb:49:0c:50:e4:
ec:0a:1e:44:8f:0c:36:27:dc:04:9c:38:58:b3:cf:
c3:52:bd:e4:bd:aa:9c:4b:b7:d5:0d:fd:e2:be:08:
59:dc:82:3e:6d:7b:44:90:ae:9f:62:35:30:57:61:
7f:3e:51:53:c5:f0:a2:65:77:68:14:52:48:38:91:
e8:7a:64:ad:3b:60:b0:1d:49:28:80:91:e0:77:64:
60:66:7a:9e:7b:2d:f2:2d:2a:32:2d:be:33:fe:34:
f3:2c:97:72:90:c8:ac:4e:46:be:61:e9:d1:58:b5:
b4:c0:d5:59:bc:a3:ec:18:fa:2a:ea:2d:b7:c3:a0:
77:d2:67:ab:45:66:3b:fb:0b:85:78:13:2a:8a:af:
d0:27:c8:8c:6d:72:42:38:47:cd:34:f9:ad:5d:2a:
db:d0:94:c0:74:72:37:f0:c2:fa:5c:38:3e:b4:dc:
e4:11:6c:a5:9b:62:10:0e:bf:a2:ca:3f:41:4f:65:
4f:1b:76:ba:ab:18:20:50:ca:4e:bf:25:d4:9d:fc:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:30:AF:E4:D6:BC:85:D5:5C:A3:D1:C3:6C:22:D6:B3:9A:A4:8F:58
X509v3 Authority Key Identifier:
keyid:48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:da:bd:9d:ba:57:7e:7e:8e:e7:f3:b0:a8:3f:a7:a8:fd:01:
2e:4e:aa:fa:e0:c6:92:d8:28:de:d7:3a:ed:7e:32:b7:9b:49:
e1:6b:d7:4f:46:28:a8:81:2d:95:51:8e:37:23:50:77:8c:f7:
67:01:64:ea:7a:0a:1f:36:2f:f8:87:0f:4a:43:36:8e:33:76:
c6:eb:00:98:f2:4e:23:0e:3a:d0:e8:6e:d5:57:12:7d:5f:e0:
62:80:3d:6f:6c:f8:4e:d4:ab:92:6d:11:a1:d1:7f:83:38:11:
b6:78:ba:79:1d:ca:0a:12:15:f3:26:c7:32:35:5d:54:75:7a:
1c:3f:40:e4:73:92:1f:17:e0:cf:20:9e:3c:2b:4f:ef:4e:aa:
f6:8d:c8:17:60:9c:36:b1:30:a3:41:58:95:b7:93:dd:80:cf:
ec:29:22:27:8f:23:b9:c5:b9:6e:bc:d4:71:4c:d1:a8:db:bb:
43:1a:8c:71:3f:88:09:31:ac:33:dd:a6:66:52:56:92:42:01:
49:6d:51:6e:6b:71:87:14:63:0f:ff:58:58:c6:31:3c:b9:e0:
a4:44:18:0c:78:6b:0b:94:dc:e5:0a:5d:de:ac:e8:86:fd:21:
38:76:60:ba:61:4d:37:be:6c:dd:04:3a:3f:4e:d0:99:f1:e0:
d4:85:68:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:41 2025 by rpki-client on console-fra.rpki-client.org